Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document the default certificate duration and process to change #574

Open
3 tasks
leochr opened this issue Apr 29, 2024 · 1 comment
Open
3 tasks

Document the default certificate duration and process to change #574

leochr opened this issue Apr 29, 2024 · 1 comment
Assignees

Comments

@leochr
Copy link
Member

leochr commented Apr 29, 2024

By default, the Certificate requested by Liberty Operator is valid for 90 days (duration), but the rotation happens well before that. The default renew-before period is 1/3 of the duration, so the rotation will happen every 30 days by default.

The default 90 days duration can be changed by updating the value of certManagerCertDuration in the ConfigMap open-liberty-operator (in the namespace where the Operator is installed). This global configuration applies to all applications managed by Liberty Operator.

  • Documented for OLO
  • Documented (or referenced) for RCO
  • Documented for WLO
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants